Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1 May 18 2006 07:03PM
Amit Klein (AKsecurity) (aksecurity hotpop com)
On 8 May 2006 at 16:01, Zaninotti, Thiago wrote:

> Folks,
>
> During some specific tests with our upcoming Web App Security Scanner tool,
> we have found that Apache would kindly accept HTML injection through
> "Expect" header. Originally meant to be a protocol flow control that would
> give we...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus